جزئیات آسیب‌پذیری
CVE-2026-20250
Cisco Secure Firewall Adaptive Security Appliance SoftwareCisco Secure Firewall Threat Defense Software
Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 3100 and 4200 Series DTLS Denial of Service Vulnerability
CVSS 3.1
8.6بالا
شرح رسمی (انگلیسی)
A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software and Cisco Secure Firewall Threat Defense (FTD) Software for Cisco Secure Firewall 3100 Series and 4200 Series devices could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to improper resource management when processing certain DTLS messages. An attacker could exploit this vulnerability by sending a crafted stream of DTLS traffic to an affected device. A successful exploit could allow the attacker to cause the device to reload, resulting in a DoS condition.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 8.6بالا | 3.1 | CVEProject cvelistV5 (CNA) (cisco) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.1.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.1.6 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.2.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.2.14 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.2.20 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.2.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.22.2.9 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.23.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.23.1.13 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.23.1.19 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.23.1.22 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.23.1.26 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.23.1.3 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.23.1.7 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Adaptive Security Appliance (ASA) Software | 9.24.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 10.0.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.2 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.2.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.6.4 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.7.0 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.7.10 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.7.10.1 | CVEProject cvelistV5 (CNA) |
| Cisco | Cisco Secure Firewall Threat Defense (FTD) Software | 7.7.11 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۱
کانال تلگرام کُلون @kolunsec_fa
تازه‌های KEV، خبرهای مهم و خلاصه‌ی روزانه
هشدار CVEهای بعدی این محصولمحصول را دنبال کنید تا آسیب‌پذیری‌های تازه را در تلگرام بگیرید.
اطلاعات
- تاریخ انتشار
- ۱۴۰۵/۰۶/۲۵
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۶/۲۷
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- cisco
پیش‌بینی بهره‌برداری (EPSS)
۰٫۵۷٪
احتمال بهره‌برداری در ۳۰ روز
۴۷٫۶٪
صدک (نسبت به همه‌ی CVEها)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- ندارد
- اثر فنی
- جزئی
ضعف‌ها (CWE)
- CWE-772Missing Release of Resource after Effective Lifetime